@thecorporation/corp-tools 26.3.45 → 26.3.47

package/dist/index.d.ts

@@ -1,3 +1,9 @@
+type CapTableInstrument = {
+    instrument_id: string;
+    kind: string;
+    symbol: string;
+    status?: string;
+};
 interface CorpConfig {
     api_url: string;
     api_key: string;
@@ -3419,14 +3425,9 @@ interface ToolContext {
     dataDir: string;
     onEntityFormed?: (entityId: string) => void;
 }
-type CapTableInstrument = {
-    instrument_id: string;
-    kind: string;
-    symbol: string;
-    status?: string;
-};
 declare function ensureSafeInstrument(client: CorpAPIClient, entityId: string): Promise<CapTableInstrument>;
 declare const TOOL_DEFINITIONS: Record<string, unknown>[];
+declare const TOOL_DISPATCH_COUNT: number;
 declare function isWriteTool(name: string, args?: Record<string, unknown>): boolean;
 declare function executeTool(name: string, args: Record<string, unknown>, client: CorpAPIClient, ctx: ToolContext): Promise<string>;
 
@@ -3435,7 +3436,7 @@ declare function describeToolCall(name: string, args: Record<string, unknown>):
 /**
  * System prompt base and config formatter.
  */
-declare const SYSTEM_PROMPT_BASE = "You are a corporate governance assistant for TheCorporation, an agentic corporate governance platform.\n\n## Context\n{context}\n\n## Tools\nYou have 10 tools, each with an `action` parameter that selects the operation:\n\n| Tool | Actions |\n|------|---------|\n| **workspace** | status, list_entities, obligations, billing |\n| **entity** | get_cap_table, list_documents, list_safe_notes, form, create, add_founder, finalize, convert, dissolve |\n| **equity** | start_round, add_security, issue_round, issue, issue_safe, transfer, distribution |\n| **valuation** | create, submit, approve |\n| **meeting** | schedule, notice, convene, vote, resolve, finalize_item, adjourn, cancel, consent, attach_document, list_items, list_votes |\n| **finance** | create_invoice, run_payroll, submit_payment, open_bank_account, reconcile |\n| **compliance** | file_tax, track_deadline, classify_contractor, generate_contract |\n| **document** | signing_link, signer_link, download_link |\n| **checklist** | get, update |\n| **agent** | list, create, message, update, add_skill |\n\n## Rules\n- All monetary values are in integer cents ($1,000 = 100000).\n- Be concise and helpful.\n- **You MUST confirm with the user before calling ANY write action.** Describe what you are about to do and wait for explicit approval. Never execute tools speculatively or \"on behalf of\" the user without their go-ahead.\n- Don't ask for info available in platform config \u2014 use the correct values automatically.\n- If only one option exists for a field, use it without asking.\n- Don't make up data \u2014 only present what the tools return.\n- If a tool returns an error, explain it simply without exposing raw error details.\n- NEVER create an agent to answer a question you can answer yourself. You are the assistant \u2014 answer questions directly using your knowledge and the read tools.\n\n## Agent Rules\n- Agents are for **delegating recurring corporate operations tasks** that the user explicitly requests \u2014 e.g. \"process incoming invoices\", \"monitor compliance deadlines\", \"handle payroll every two weeks\".\n- Agents are NOT for research, answering questions, or one-off lookups. If the user asks a question, YOU answer it.\n- NEVER proactively suggest or create an agent unless the user specifically asks for one.\n- Agent tools require a paid plan.\n\n## Entity Formation Rules\n- **Prefer the staged formation flow** over `entity action=form`:\n  1. `entity action=create` \u2014 type + name \u2192 returns `entity_id`\n  2. `entity action=add_founder` \u2014 add each founder one at a time (name, email, role, ownership_pct)\n  3. `entity action=finalize` \u2014 generates documents + cap table\n- When using `entity action=form` (legacy), you MUST ask about all founding members and their ownership allocations BEFORE calling it.\n- For LLCs, ownership percentages must total 100%.\n\n## Equity Round Rules\n- **Prefer the staged round flow** for issuing equity to multiple holders:\n  1. `equity action=start_round` \u2014 entity_id + name + issuer_legal_entity_id \u2192 returns `round_id`\n  2. `equity action=add_security` \u2014 add each holder's shares one at a time (round_id, instrument_id, quantity, recipient_name, plus holder_id or email)\n  3. `equity action=issue_round` \u2014 creates positions for all pending securities, closes the round, and auto-creates a board meeting agenda item for approval (or adds to an existing pending meeting)\n  4. Complete the board meeting lifecycle (notice \u2192 convene \u2192 vote \u2192 resolve \u2192 finalize \u2192 adjourn) to formally approve the round\n- The entity must already have a cap table with holders and instruments set up.\n- Use `entity action=get_cap_table` to look up holder IDs, instrument IDs, and the issuer legal entity ID before starting.\n- `equity action=add_security` can resolve recipients by `holder_id`, `email`, or auto-create from `recipient_name`.\n\n## Share Transfer Rules\n- **Prefer the transfer workflow** for share transfers \u2014 it includes bylaws review, ROFR, board approval, document generation, and signatures.\n- `equity action=transfer` is a direct bypass that skips all governance. It requires `skip_governance_review: true` to confirm the caller intentionally wants to skip the workflow. Only use it for corrective entries or when the user explicitly requests skipping governance.\n\n## Valuation Rules\n- To create and approve a 409A valuation:\n  1. `valuation action=create` \u2014 type=four_oh_nine_a + effective_date + methodology + fmv_per_share_cents \u2192 valuation_id (Draft)\n  2. `valuation action=submit` \u2014 Draft \u2192 PendingApproval; auto-creates board meeting agenda item (or adds to existing pending meeting)\n  3. Complete the board meeting lifecycle (notice \u2192 convene \u2192 vote \u2192 resolve \u2192 finalize \u2192 adjourn)\n  4. `valuation action=approve` \u2014 PendingApproval \u2192 Approved; pass resolution_id from the board vote\n- 409A valuations auto-expire after 365 days from effective_date\n- When a new 409A is approved, any previous approved 409A is auto-superseded\n\n## Governance Meeting Rules\n- Full meeting lifecycle:\n  1. `meeting action=schedule` \u2014 entity_id + body_id + meeting_type + title + agenda_item_titles \u2192 meeting_id\n  2. `meeting action=notice` \u2014 Draft \u2192 Noticed\n  3. `meeting action=convene` \u2014 present_seat_ids \u2192 quorum check \u2192 Noticed \u2192 Convened\n  4. `meeting action=vote` \u2014 vote on each agenda item (requires Convened + quorum met)\n  5. `meeting action=resolve` \u2014 tally votes \u2192 create Resolution\n  6. `meeting action=finalize_item` \u2014 mark item as Voted (requires resolution), Discussed, Tabled, or Withdrawn\n  7. `meeting action=adjourn` \u2014 Convened \u2192 Adjourned\n- For written consent (no physical meeting): use `meeting action=consent` \u2014 auto-convened, skip notice/convene\n- Use `meeting action=list_items` to get agenda_item_ids after scheduling\n- Use `entity action=get_cap_table` or governance read tools to look up body_id and seat holder IDs\n- `meeting action=cancel` works from Draft or Noticed status only\n\n## Document Signing Rules\n- You CANNOT sign documents on behalf of users. Signing is a human action.\n- Use `document action=signing_link` to generate a signing URL for a document.\n- Present the signing link so users can open it and sign themselves.\n- NEVER attempt to sign, execute, or complete signature actions automatically.\n- The `document action=signing_link` tool does NOT sign anything \u2014 it only returns a URL.\n\n## User Journey\nAfter completing any action, ALWAYS present the logical next step(s) as a\nnumbered list. The user should never wonder \"what now?\" \u2014 guide them forward.\n\nAfter entity formation (staged or legacy):\n1. The `entity action=finalize` (or `entity action=form`) response includes a `document_ids` array. These documents are created immediately \u2014 they are NEVER \"still being generated\" or delayed.\n2. Immediately call `document action=signing_link` for each document ID in the response to get signing URLs.\n3. Present the signing links to the user right away. Do NOT tell the user to \"check back later\" or that documents are \"being prepared\" \u2014 they already exist.\n4. Then: \"Documents signed! Next: apply for an EIN, open a bank account, or issue equity.\"\n\nAfter document generation:\n1. Present signing links immediately \u2014 don't wait for the user to ask.\n2. Use the document IDs from the tool response \u2014 do NOT call `entity action=list_documents` to re-fetch them.\n\nAfter signing:\n1. \"Documents are signed! Next: file for EIN, open a bank account, or add team members.\"\n\nAfter equity issuance:\n1. \"Equity issued! Next: generate the stock certificate for signing, or issue more grants.\"\n\nGeneral pattern:\n- Always end with 1-2 concrete next actions the user can take.\n- Phrase them as questions or suggestions: \"Would you like to [next step]?\"\n- If there are signing obligations, proactively generate and present the signing links.\n- Never just say \"done\" \u2014 always show what comes next.\n\nAfter major actions, use `checklist action=update` to track progress. Use markdown checkbox\nformat (- [x] / - [ ]). Call `checklist action=get` first to see current state, then\nupdate with checked-off items. This helps users see where they are.\n\n{extra_sections}";
+declare const SYSTEM_PROMPT_BASE: string;
 declare function formatConfigSection(cfgData: Record<string, unknown>): string;
 
 declare const GENERATED_TOOL_DEFINITIONS: Record<string, unknown>[];
@@ -3639,6 +3640,14 @@ type WorkItemStatus = (typeof WorkItemStatus)[number];
 declare const WorkflowType: readonly ["transfer", "fundraising"];
 type WorkflowType = (typeof WorkflowType)[number];
 
+/**
+ * Generate a Fernet-compatible encryption key.
+ *
+ * Fernet requires a 32-byte key encoded as **standard** base64 (RFC 4648 sec. 4),
+ * which produces exactly 44 characters (including `=` padding).
+ * We use `toString("base64")` (not `base64url`) so the padding is correct
+ * and the key is accepted by Fernet implementations without modification.
+ */
 declare function generateFernetKey(): string;
 declare function generateSecret(length?: number): string;
 declare function loadEnvFile(path: string): void;
@@ -3783,4 +3792,4 @@ interface WrittenConsentArgs {
 }
 declare function writtenConsent(client: CorpAPIClient, args: WrittenConsentArgs): Promise<WorkflowResult>;
 
-export { type AcceptEquityRoundRequest, type AcceptRoundRequest, AccountType, type AddFounderRequest, type AddFounderResponse, type AddSecurityRequest, type AgendaItemResponse, AgendaItemStatus, AgendaItemType, type AgentResponse, AgentStatus, AntiDilutionMethod, type ApiRecord, type ApplyEquityRoundTermsRequest, type ApplyRoundTermsRequest, AssigneeType, type AttachResolutionDocumentRequest, AuthoritySource, AuthorityTier, BankAccountStatus, BankAccountType, type BoardApproveEquityRoundRequest, type BoardApproveRoundRequest, BodyStatus, BodyType, CapTableAccess, CapTableBasis, type CapTableHolderSummary, type CapTableInstrument, type CapTableInstrumentSummary, type CapTableResponse, type CastVoteRequest, ClassificationResult, type ComputeResolutionRequest, ContactCategory, type ContactProfileResponse, type ContactResponse, ContactStatus, ContactType, ContractStatus, ContractTemplateType, ControlType, type ConveneMeetingRequest, type ConvertEntityRequest, CorpAPIClient, type CorpConfig, type CreateAgentRequest, type CreateContactRequest, type CreateEquityRoundRequest, type CreateExecutionIntentRequest, type CreateFormationRequest, type CreatePendingFormationRequest, type CreateRoundRequest, Currency, DeadlineSeverity, DeadlineStatus, type DigestSummary, type DigestTriggerResponse, type DissolveEntityRequest, DistributionStatus, DistributionType, DocumentRequestStatus, type DocumentResponse, DocumentStatus, type DocumentSummary, DocumentType, EntityType, type EquityRoundResponse, EquityRoundStatus, EscalationStatus, type ExecuteRoundConversionRequest, type FinalizeAgendaItemRequest, type FormationGatesResponse, type FormationResponse, FormationState, FormationStatus, type FormationStatusResponse, type FormationWithCapTableResponse, GENERATED_TOOL_DEFINITIONS, GlAccountCode, GovernanceAuditEventType, type GovernanceBodyResponse, GovernanceMode, type GovernanceSeatResponse, GovernanceTriggerSource, GovernanceTriggerType, GoverningDocType, GrantType, HolderType, HttpMethod, IncidentSeverity, IncidentStatus, InstrumentKind, InstrumentStatus, type IntentResponse, IntentStatus, InvestorType, type InvoiceResponse, InvoiceStatus, type IssueEquityArgs, type IssueSafeArgs, type IssueStagedRoundResponse, JournalEntryStatus, type LLMResponse, LegalEntityRole, type MatchRecord, type MeetingResponse, MeetingStatus, MeetingType, MemberRole, NetworkEgress, type NextStepItem, type NextStepsResponse, type NextStepsSummary, type ObligationResponse, ObligationStatus, type ObligationsSummaryResponse, OfficerTitle, PaymentMethod, PaymentStatus, PayrollStatus, type PendingFormationResponse, PositionStatus, type PreviewRoundConversionRequest, type ProcessRequestOptions, QuorumStatus, QuorumThreshold, READ_ONLY_TOOLS, RESOURCE_KINDS, ReceiptStatus, ReconciliationStatus, Recurrence, ReferenceKind, type ReferenceMatch, type ReferenceStorage, ReferenceTracker, type ResolutionResponse, ResolutionType, type ResourceKind, RiskLevel, type RoundResponse, SYSTEM_PROMPT_BASE, SafeStatus, SafeType, type ScheduleMeetingRequest, Scope, SeatRole, SeatStatus, SessionExpiredError, Side, type StartStagedRoundRequest, TOOL_DEFINITIONS, TOOL_REGISTRY, TaxFilingStatus, type ToolCall, type ToolContext, TransactionPacketStatus, TransferStatus, TransferType, TransfereeRights, Transport, type UpdateAgentRequest, type UpdateContactRequest, ValuationMethodology, ValuationStatus, ValuationType, type VoteResponse, VoteValue, VotingMethod, WorkItemActorTypeValue, WorkItemStatus, type WorkflowResult, type WorkflowStep, WorkflowType, type WorkspaceContactSummary, type WorkspaceEntitySummary, type WorkspaceStatusResponse, type WrittenConsentArgs, type WrittenConsentRequest, type WrittenConsentResponse, buildInstrumentCreationHint, describeReferenceRecord, describeToolCall, ensureEnvFile, ensureIssuancePreflight, ensureSafeInstrument, entityHasActiveBoard, executeTool, expectedInstrumentKinds, extractId, formatConfigSection, generateFernetKey, generateSecret, getReferenceAlias, getReferenceId, getReferenceLabel, grantRequiresCurrent409a, isEntityScopedKind, isOpaqueUuid, isShortIdCandidate, isValidResourceKind, isWriteTool, issueEquity, issueSafe, kindLabel, loadEnvFile, matchRank, normalize, normalizedGrantType, parseLastReference, processRequest, provisionWorkspace, resetCache, resolveBinaryPath, resolveInstrumentForGrant, shortId, slugify, uniqueStrings, validateReferenceInput, writtenConsent };
+export { type AcceptEquityRoundRequest, type AcceptRoundRequest, AccountType, type AddFounderRequest, type AddFounderResponse, type AddSecurityRequest, type AgendaItemResponse, AgendaItemStatus, AgendaItemType, type AgentResponse, AgentStatus, AntiDilutionMethod, type ApiRecord, type ApplyEquityRoundTermsRequest, type ApplyRoundTermsRequest, AssigneeType, type AttachResolutionDocumentRequest, AuthoritySource, AuthorityTier, BankAccountStatus, BankAccountType, type BoardApproveEquityRoundRequest, type BoardApproveRoundRequest, BodyStatus, BodyType, CapTableAccess, CapTableBasis, type CapTableHolderSummary, type CapTableInstrument, type CapTableInstrumentSummary, type CapTableResponse, type CastVoteRequest, ClassificationResult, type ComputeResolutionRequest, ContactCategory, type ContactProfileResponse, type ContactResponse, ContactStatus, ContactType, ContractStatus, ContractTemplateType, ControlType, type ConveneMeetingRequest, type ConvertEntityRequest, CorpAPIClient, type CorpConfig, type CreateAgentRequest, type CreateContactRequest, type CreateEquityRoundRequest, type CreateExecutionIntentRequest, type CreateFormationRequest, type CreatePendingFormationRequest, type CreateRoundRequest, Currency, DeadlineSeverity, DeadlineStatus, type DigestSummary, type DigestTriggerResponse, type DissolveEntityRequest, DistributionStatus, DistributionType, DocumentRequestStatus, type DocumentResponse, DocumentStatus, type DocumentSummary, DocumentType, EntityType, type EquityRoundResponse, EquityRoundStatus, EscalationStatus, type ExecuteRoundConversionRequest, type FinalizeAgendaItemRequest, type FormationGatesResponse, type FormationResponse, FormationState, FormationStatus, type FormationStatusResponse, type FormationWithCapTableResponse, GENERATED_TOOL_DEFINITIONS, GlAccountCode, GovernanceAuditEventType, type GovernanceBodyResponse, GovernanceMode, type GovernanceSeatResponse, GovernanceTriggerSource, GovernanceTriggerType, GoverningDocType, GrantType, HolderType, HttpMethod, IncidentSeverity, IncidentStatus, InstrumentKind, InstrumentStatus, type IntentResponse, IntentStatus, InvestorType, type InvoiceResponse, InvoiceStatus, type IssueEquityArgs, type IssueSafeArgs, type IssueStagedRoundResponse, JournalEntryStatus, type LLMResponse, LegalEntityRole, type MatchRecord, type MeetingResponse, MeetingStatus, MeetingType, MemberRole, NetworkEgress, type NextStepItem, type NextStepsResponse, type NextStepsSummary, type ObligationResponse, ObligationStatus, type ObligationsSummaryResponse, OfficerTitle, PaymentMethod, PaymentStatus, PayrollStatus, type PendingFormationResponse, PositionStatus, type PreviewRoundConversionRequest, type ProcessRequestOptions, QuorumStatus, QuorumThreshold, READ_ONLY_TOOLS, RESOURCE_KINDS, ReceiptStatus, ReconciliationStatus, Recurrence, ReferenceKind, type ReferenceMatch, type ReferenceStorage, ReferenceTracker, type ResolutionResponse, ResolutionType, type ResourceKind, RiskLevel, type RoundResponse, SYSTEM_PROMPT_BASE, SafeStatus, SafeType, type ScheduleMeetingRequest, Scope, SeatRole, SeatStatus, SessionExpiredError, Side, type StartStagedRoundRequest, TOOL_DEFINITIONS, TOOL_DISPATCH_COUNT, TOOL_REGISTRY, TaxFilingStatus, type ToolCall, type ToolContext, TransactionPacketStatus, TransferStatus, TransferType, TransfereeRights, Transport, type UpdateAgentRequest, type UpdateContactRequest, ValuationMethodology, ValuationStatus, ValuationType, type VoteResponse, VoteValue, VotingMethod, WorkItemActorTypeValue, WorkItemStatus, type WorkflowResult, type WorkflowStep, WorkflowType, type WorkspaceContactSummary, type WorkspaceEntitySummary, type WorkspaceStatusResponse, type WrittenConsentArgs, type WrittenConsentRequest, type WrittenConsentResponse, buildInstrumentCreationHint, describeReferenceRecord, describeToolCall, ensureEnvFile, ensureIssuancePreflight, ensureSafeInstrument, entityHasActiveBoard, executeTool, expectedInstrumentKinds, extractId, formatConfigSection, generateFernetKey, generateSecret, getReferenceAlias, getReferenceId, getReferenceLabel, grantRequiresCurrent409a, isEntityScopedKind, isOpaqueUuid, isShortIdCandidate, isValidResourceKind, isWriteTool, issueEquity, issueSafe, kindLabel, loadEnvFile, matchRank, normalize, normalizedGrantType, parseLastReference, processRequest, provisionWorkspace, resetCache, resolveBinaryPath, resolveInstrumentForGrant, shortId, slugify, uniqueStrings, validateReferenceInput, writtenConsent };

package/dist/index.js

@@ -39,7 +39,7 @@ INTERNAL_WORKER_TOKEN={{INTERNAL_WORKER_TOKEN}}
 # MAX_QUEUE_DEPTH=1000
 `;
 function generateFernetKey() {
-  return randomBytes(32).toString("base64url") + "=";
+  return randomBytes(32).toString("base64");
 }
 function generateSecret(length = 32) {
   return randomBytes(length).toString("hex");
@@ -1310,6 +1310,141 @@ var GENERATED_TOOL_DEFINITIONS = [
   }
 ];
 
+// src/workflows/equity-helpers.ts
+function normalizedGrantType(grantType) {
+  return grantType.trim().toLowerCase().replaceAll("-", "_").replaceAll(" ", "_");
+}
+function expectedInstrumentKinds(grantType) {
+  switch (normalizedGrantType(grantType)) {
+    case "common":
+    case "common_stock":
+      return ["common_equity"];
+    case "preferred":
+    case "preferred_stock":
+      return ["preferred_equity"];
+    case "unit":
+    case "membership_unit":
+      return ["membership_unit"];
+    case "option":
+    case "options":
+    case "stock_option":
+    case "iso":
+    case "nso":
+      return ["option_grant"];
+    case "rsa":
+      return ["common_equity", "preferred_equity"];
+    case "safe":
+    case "post_money":
+    case "pre_money":
+    case "mfn":
+      return ["safe"];
+    default:
+      return [];
+  }
+}
+function grantRequiresCurrent409a(grantType, instrumentKind) {
+  return instrumentKind?.toLowerCase() === "option_grant" || expectedInstrumentKinds(grantType).includes("option_grant");
+}
+function buildInstrumentCreationHint(grantType) {
+  const normalized = normalizedGrantType(grantType);
+  switch (normalized) {
+    case "preferred":
+    case "preferred_stock":
+      return "Create one with: corp cap-table create-instrument --kind preferred_equity --symbol SERIES-A --authorized-units <shares>";
+    case "option":
+    case "options":
+    case "stock_option":
+    case "iso":
+    case "nso":
+      return "Create one with: corp cap-table create-instrument --kind option_grant --symbol OPTION-PLAN --authorized-units <shares>";
+    case "membership_unit":
+    case "unit":
+      return "Create one with: corp cap-table create-instrument --kind membership_unit --symbol UNIT --authorized-units <units>";
+    case "common":
+    case "common_stock":
+      return "Create one with: corp cap-table create-instrument --kind common_equity --symbol COMMON --authorized-units <shares>";
+    default:
+      return "Create a matching instrument first, then pass --instrument-id explicitly.";
+  }
+}
+function resolveInstrumentForGrant(instruments, grantType, explicitInstrumentId) {
+  if (explicitInstrumentId) {
+    const explicit = instruments.find(
+      (instrument) => instrument.instrument_id === explicitInstrumentId
+    );
+    if (!explicit) {
+      throw new Error(
+        `Instrument ${explicitInstrumentId} was not found on the cap table.`
+      );
+    }
+    return explicit;
+  }
+  const kinds = expectedInstrumentKinds(grantType);
+  if (kinds.length === 0) {
+    throw new Error(
+      `No default instrument mapping exists for grant type "${grantType}". ${buildInstrumentCreationHint(grantType)}`
+    );
+  }
+  const match = instruments.find(
+    (instrument) => kinds.includes(String(instrument.kind).toLowerCase())
+  );
+  if (!match) {
+    throw new Error(
+      `No instrument found for grant type "${grantType}". Expected one of: ${kinds.join(", ")}. ${buildInstrumentCreationHint(grantType)}`
+    );
+  }
+  return match;
+}
+async function entityHasActiveBoard(client, entityId) {
+  const bodies = await client.listGovernanceBodies(entityId);
+  return bodies.some(
+    (body) => String(body.body_type ?? "").toLowerCase() === "board_of_directors" && String(body.status ?? "active").toLowerCase() === "active"
+  );
+}
+async function ensureIssuancePreflight(client, entityId, grantType, instrument, meetingId, resolutionId, operationLabel) {
+  if (!meetingId || !resolutionId) {
+    if (await entityHasActiveBoard(client, entityId)) {
+      const label = operationLabel ?? "this issuance";
+      throw new Error(
+        `Board approval is required for ${label}. Pass --meeting-id and --resolution-id from a passed board vote.
+  Tip: Use 'corp governance quick-approve --text "RESOLVED: authorize ${label}"' for one-step approval.`
+      );
+    }
+  }
+  if (!grantRequiresCurrent409a(grantType, instrument?.kind)) {
+    return;
+  }
+  try {
+    await client.getCurrent409a(entityId);
+  } catch (err) {
+    const msg = String(err);
+    if (msg.includes("404") || msg.includes("Not found") || msg.includes("not found")) {
+      try {
+        const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
+        const valuation = await client.createValuation({
+          entity_id: entityId,
+          valuation_type: "four_oh_nine_a",
+          effective_date: today,
+          methodology: "backsolve",
+          fmv_per_share_cents: 1
+          // $0.01 par value — typical early stage
+        });
+        const valuationId = String(valuation.valuation_id ?? "");
+        if (valuationId) {
+          await client.submitValuationForApproval(valuationId, entityId);
+          await client.approveValuation(valuationId, entityId);
+        }
+        return;
+      } catch {
+      }
+      throw new Error(
+        "Stock option issuances require a current approved 409A valuation.\n  Auto-creation failed. Create manually:\n    corp cap-table create-valuation --type four_oh_nine_a --date YYYY-MM-DD --methodology backsolve --auto-approve"
+      );
+    }
+    throw err;
+  }
+}
+
 // src/tools.ts
 function requiredString(args, key) {
   const value = args[key];
@@ -1427,102 +1562,6 @@ var entityActions = {
   },
   dissolve: async (args, client) => client.dissolveEntity(requiredString(args, "entity_id"), args)
 };
-function normalizedGrantType(grantType) {
-  return grantType.trim().toLowerCase().replaceAll("-", "_").replaceAll(" ", "_");
-}
-function expectedInstrumentKinds(grantType) {
-  switch (normalizedGrantType(grantType)) {
-    case "common":
-    case "common_stock":
-      return ["common_equity"];
-    case "preferred":
-    case "preferred_stock":
-      return ["preferred_equity"];
-    case "unit":
-    case "membership_unit":
-      return ["membership_unit"];
-    case "option":
-    case "options":
-    case "stock_option":
-    case "iso":
-    case "nso":
-      return ["option_grant"];
-    case "rsa":
-      return ["common_equity", "preferred_equity"];
-    case "safe":
-    case "post_money":
-    case "pre_money":
-    case "mfn":
-      return ["safe"];
-    default:
-      return [];
-  }
-}
-function grantRequiresCurrent409a(grantType, instrumentKind) {
-  return instrumentKind?.toLowerCase() === "option_grant" || expectedInstrumentKinds(grantType).includes("option_grant");
-}
-function instrumentCreationHint(grantType) {
-  const normalized = normalizedGrantType(grantType);
-  switch (normalized) {
-    case "preferred":
-    case "preferred_stock":
-      return "Create a preferred instrument first, then re-run issuance with that instrument ID.";
-    case "option":
-    case "options":
-    case "stock_option":
-    case "iso":
-    case "nso":
-      return "Create an option_grant instrument first, then re-run issuance with that instrument ID.";
-    case "membership_unit":
-    case "unit":
-      return "Create a membership_unit instrument first, then re-run issuance with that instrument ID.";
-    default:
-      return "Create a matching instrument first, then re-run issuance with that instrument ID.";
-  }
-}
-function resolveInstrumentForGrant(instruments, grantType, explicitInstrumentId) {
-  if (explicitInstrumentId) {
-    const explicit = instruments.find((instrument) => instrument.instrument_id === explicitInstrumentId);
-    if (!explicit) {
-      throw new Error(`Instrument ${explicitInstrumentId} was not found on the cap table.`);
-    }
-    return explicit;
-  }
-  const expectedKinds = expectedInstrumentKinds(grantType);
-  if (!expectedKinds.length) {
-    throw new Error(`No default instrument mapping exists for grant type "${grantType}". ${instrumentCreationHint(grantType)}`);
-  }
-  const match = instruments.find((instrument) => expectedKinds.includes(instrument.kind.toLowerCase()));
-  if (!match) {
-    throw new Error(
-      `No instrument found for grant type "${grantType}". Expected one of: ${expectedKinds.join(", ")}. ${instrumentCreationHint(grantType)}`
-    );
-  }
-  return match;
-}
-async function entityHasActiveBoard(client, entityId) {
-  const bodies = await client.listGovernanceBodies(entityId);
-  return bodies.some(
-    (body) => String(body.body_type ?? "").toLowerCase() === "board_of_directors" && String(body.status ?? "active").toLowerCase() === "active"
-  );
-}
-async function ensureIssuancePreflight(client, entityId, grantType, instrument, meetingId, resolutionId) {
-  if ((!meetingId || !resolutionId) && await entityHasActiveBoard(client, entityId)) {
-    throw new Error("Board approval is required before issuing this round. Provide meeting_id and resolution_id from a passed board vote.");
-  }
-  if (!grantRequiresCurrent409a(grantType, instrument?.kind)) {
-    return;
-  }
-  try {
-    await client.getCurrent409a(entityId);
-  } catch (err) {
-    const msg = String(err);
-    if (msg.includes("404")) {
-      throw new Error("Stock option issuances require a current approved 409A valuation.");
-    }
-    throw err;
-  }
-}
 async function ensureSafeInstrument(client, entityId) {
   const capTable = await client.getCapTable(entityId);
   const issuerLegalEntityId = capTable.issuer_legal_entity_id;
@@ -1782,24 +1821,11 @@ var documentActions = {
   },
   download_link: async (args, client) => {
     const docId = args.document_id;
-    try {
-      const resp = await fetch(`${client.apiUrl}/v1/documents/${docId}/request-copy`, {
-        method: "POST",
-        headers: { Authorization: `Bearer ${client.apiKey}`, "Content-Type": "application/json" },
-        body: JSON.stringify({ email: "owner@workspace" })
-      });
-      if (!resp.ok) throw new Error("request-copy failed");
-      const result = await resp.json();
-      let downloadUrl = result.download_url ?? "";
-      if (downloadUrl.startsWith("/")) downloadUrl = client.apiUrl + downloadUrl;
-      return { document_id: docId, download_url: downloadUrl, expires_in: "24 hours" };
-    } catch {
-      return {
-        document_id: docId,
-        download_url: `${client.apiUrl}/v1/documents/${docId}/pdf`,
-        note: "Use your API key to authenticate the download."
-      };
-    }
+    return {
+      document_id: docId,
+      download_url: `${client.apiUrl}/v1/documents/${docId}/pdf`,
+      note: "Use your API key to authenticate the download."
+    };
   },
   preview_pdf: async (args, client) => {
     const entityId = args.entity_id;
@@ -1887,6 +1913,7 @@ var TOOL_DISPATCH = {
   agent: agentActions
 };
 var TOOL_DEFINITIONS = GENERATED_TOOL_DEFINITIONS;
+var TOOL_DISPATCH_COUNT = Object.keys(TOOL_DISPATCH).length;
 var READ_ONLY_ACTIONS = /* @__PURE__ */ new Set([
   "workspace:status",
   "workspace:list_entities",
@@ -2043,7 +2070,7 @@ var SYSTEM_PROMPT_BASE = `You are a corporate governance assistant for TheCorpor
 {context}
 
 ## Tools
-You have 10 tools, each with an \`action\` parameter that selects the operation:
+You have ${TOOL_DISPATCH_COUNT} tools, each with an \`action\` parameter that selects the operation:
 
 | Tool | Actions |
 |------|---------|
@@ -2056,6 +2083,7 @@ You have 10 tools, each with an \`action\` parameter that selects the operation:
 | **compliance** | file_tax, track_deadline, classify_contractor, generate_contract |
 | **document** | signing_link, signer_link, download_link |
 | **checklist** | get, update |
+| **work_item** | list, get, create, claim, complete, release, cancel |
 | **agent** | list, create, message, update, add_skill |
 
 ## Rules
@@ -2611,136 +2639,6 @@ var ReferenceTracker = class {
   }
 };
 
-// src/workflows/equity-helpers.ts
-function normalizedGrantType2(grantType) {
-  return grantType.trim().toLowerCase().replaceAll("-", "_").replaceAll(" ", "_");
-}
-function expectedInstrumentKinds2(grantType) {
-  switch (normalizedGrantType2(grantType)) {
-    case "common":
-    case "common_stock":
-      return ["common_equity"];
-    case "preferred":
-    case "preferred_stock":
-      return ["preferred_equity"];
-    case "unit":
-    case "membership_unit":
-      return ["membership_unit"];
-    case "option":
-    case "options":
-    case "stock_option":
-    case "iso":
-    case "nso":
-      return ["option_grant"];
-    case "rsa":
-      return ["common_equity", "preferred_equity"];
-    default:
-      return [];
-  }
-}
-function grantRequiresCurrent409a2(grantType, instrumentKind) {
-  return instrumentKind?.toLowerCase() === "option_grant" || expectedInstrumentKinds2(grantType).includes("option_grant");
-}
-function buildInstrumentCreationHint(grantType) {
-  const normalized = normalizedGrantType2(grantType);
-  switch (normalized) {
-    case "preferred":
-    case "preferred_stock":
-      return "Create one with: corp cap-table create-instrument --kind preferred_equity --symbol SERIES-A --authorized-units <shares>";
-    case "option":
-    case "options":
-    case "stock_option":
-    case "iso":
-    case "nso":
-      return "Create one with: corp cap-table create-instrument --kind option_grant --symbol OPTION-PLAN --authorized-units <shares>";
-    case "membership_unit":
-    case "unit":
-      return "Create one with: corp cap-table create-instrument --kind membership_unit --symbol UNIT --authorized-units <units>";
-    case "common":
-    case "common_stock":
-      return "Create one with: corp cap-table create-instrument --kind common_equity --symbol COMMON --authorized-units <shares>";
-    default:
-      return "Create a matching instrument first, then pass --instrument-id explicitly.";
-  }
-}
-function resolveInstrumentForGrant2(instruments, grantType, explicitInstrumentId) {
-  if (explicitInstrumentId) {
-    const explicit = instruments.find(
-      (instrument) => instrument.instrument_id === explicitInstrumentId
-    );
-    if (!explicit) {
-      throw new Error(
-        `Instrument ${explicitInstrumentId} was not found on the cap table.`
-      );
-    }
-    return explicit;
-  }
-  const kinds = expectedInstrumentKinds2(grantType);
-  if (kinds.length === 0) {
-    throw new Error(
-      `No default instrument mapping exists for grant type "${grantType}". ${buildInstrumentCreationHint(grantType)}`
-    );
-  }
-  const match = instruments.find(
-    (instrument) => kinds.includes(String(instrument.kind).toLowerCase())
-  );
-  if (!match) {
-    throw new Error(
-      `No instrument found for grant type "${grantType}". Expected one of: ${kinds.join(", ")}. ${buildInstrumentCreationHint(grantType)}`
-    );
-  }
-  return match;
-}
-async function entityHasActiveBoard2(client, entityId) {
-  const bodies = await client.listGovernanceBodies(entityId);
-  return bodies.some(
-    (body) => String(body.body_type ?? "").toLowerCase() === "board_of_directors" && String(body.status ?? "active").toLowerCase() === "active"
-  );
-}
-async function ensureIssuancePreflight2(client, entityId, grantType, instrument, meetingId, resolutionId, operationLabel) {
-  if (!meetingId || !resolutionId) {
-    if (await entityHasActiveBoard2(client, entityId)) {
-      const label = operationLabel ?? "this issuance";
-      throw new Error(
-        `Board approval is required for ${label}. Pass --meeting-id and --resolution-id from a passed board vote.
-  Tip: Use 'corp governance quick-approve --text "RESOLVED: authorize ${label}"' for one-step approval.`
-      );
-    }
-  }
-  if (!grantRequiresCurrent409a2(grantType, instrument?.kind)) {
-    return;
-  }
-  try {
-    await client.getCurrent409a(entityId);
-  } catch (err) {
-    const msg = String(err);
-    if (msg.includes("404") || msg.includes("Not found") || msg.includes("not found")) {
-      try {
-        const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
-        const valuation = await client.createValuation({
-          entity_id: entityId,
-          valuation_type: "four_oh_nine_a",
-          effective_date: today,
-          methodology: "backsolve",
-          fmv_per_share_cents: 1
-          // $0.01 par value — typical early stage
-        });
-        const valuationId = String(valuation.valuation_id ?? "");
-        if (valuationId) {
-          await client.submitValuationForApproval(valuationId, entityId);
-          await client.approveValuation(valuationId, entityId);
-        }
-        return;
-      } catch {
-      }
-      throw new Error(
-        "Stock option issuances require a current approved 409A valuation.\n  Auto-creation failed. Create manually:\n    corp cap-table create-valuation --type four_oh_nine_a --date YYYY-MM-DD --methodology backsolve --auto-approve"
-      );
-    }
-    throw err;
-  }
-}
-
 // src/workflows/issue-equity.ts
 async function issueEquity(client, args) {
   const steps = [];
@@ -2764,13 +2662,13 @@ async function issueEquity(client, args) {
     }
     let instrument;
     try {
-      instrument = resolveInstrumentForGrant2(
+      instrument = resolveInstrumentForGrant(
         instruments,
         args.grantType,
         args.instrumentId
       );
     } catch (resolveErr) {
-      const kinds = expectedInstrumentKinds2(args.grantType);
+      const kinds = expectedInstrumentKinds(args.grantType);
       if (kinds.includes("option_grant") && !args.instrumentId) {
         const issuerLegalEntityId2 = capTable.issuer_legal_entity_id;
         if (!issuerLegalEntityId2) throw resolveErr;
@@ -2802,7 +2700,7 @@ async function issueEquity(client, args) {
       },
       detail: `Using instrument: ${instrument.symbol} (${instrument.kind})`
     });
-    await ensureIssuancePreflight2(
+    await ensureIssuancePreflight(
       client,
       args.entityId,
       args.grantType,
@@ -2881,7 +2779,7 @@ async function issueSafe(client, args) {
   const steps = [];
   const safeType = args.safeType ?? "post_money";
   try {
-    await ensureIssuancePreflight2(
+    await ensureIssuancePreflight(
       client,
       args.entityId,
       safeType,
@@ -3089,6 +2987,7 @@ export {
   SessionExpiredError,
   Side,
   TOOL_DEFINITIONS,
+  TOOL_DISPATCH_COUNT,
   TOOL_REGISTRY,
   TaxFilingStatus,
   TransactionPacketStatus,
@@ -3108,11 +3007,11 @@ export {
   describeReferenceRecord,
   describeToolCall,
   ensureEnvFile,
-  ensureIssuancePreflight2 as ensureIssuancePreflight,
+  ensureIssuancePreflight,
   ensureSafeInstrument,
-  entityHasActiveBoard2 as entityHasActiveBoard,
+  entityHasActiveBoard,
   executeTool,
-  expectedInstrumentKinds2 as expectedInstrumentKinds,
+  expectedInstrumentKinds,
   extractId,
   formatConfigSection,
   generateFernetKey,
@@ -3120,7 +3019,7 @@ export {
   getReferenceAlias,
   getReferenceId,
   getReferenceLabel,
-  grantRequiresCurrent409a2 as grantRequiresCurrent409a,
+  grantRequiresCurrent409a,
   isEntityScopedKind,
   isOpaqueUuid,
   isShortIdCandidate,
@@ -3132,13 +3031,13 @@ export {
   loadEnvFile,
   matchRank,
   normalize,
-  normalizedGrantType2 as normalizedGrantType,
+  normalizedGrantType,
   parseLastReference,
   processRequest,
   provisionWorkspace,
   resetCache,
   resolveBinaryPath,
-  resolveInstrumentForGrant2 as resolveInstrumentForGrant,
+  resolveInstrumentForGrant,
   shortId,
   slugify,
   uniqueStrings,